Forum Discussion

kridsana_52318's avatar
kridsana_52318
Icon for Nimbostratus rankNimbostratus
Aug 24, 2016

User alert with regular expression

Hi everybody

We have situation that need to alert certificate expiration. Yeah it's normally have no issue. But we have a concern from customer that they got alert about certificate expired from ca-bundle.crt which they didn't using.

Is there a way to create alert snmp trap that exclude ca-bundle.crt by regular expression? ie.

alert CERT_CA_MAIL_EXPIRE "Certificate (.*?) in file (anyfile except ca-bundle.crt) will expire on (.*?)"
 {
        snmptrap OID=".1.3.6.1.4.1.3375.2.4.0.309";
        email toaddress="customermail@gmail.com"
        fromaddress="F5"
}

Or we have to delete ca-bundle.crt from F5. Is there a affect in a bad way for not have ca-bundle.crt on F5?

Thank you very much

1 Reply

  • As long as you are not using the ca-bundle.crt in any SSL profile, you should be okay with deleting it.